dynamic-application-security-testing
Enables dynamic security testing of web applications and APIs to identify vulnerabilities through active probing and fuzzing.
Install this skill
or
94/100
Security score
The dynamic-application-security-testing skill was audited on Feb 27, 2026 and we found 6 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 43
External URL reference
SourceSKILL.md
| 43 | Run a DAST scan against our staging application at https://staging.example.com. Use OWASP ZAP with the login form at /login (username: testuser, password: Test@1234). Scan all API endpoints under /api |
low line 54
External URL reference
SourceSKILL.md
| 54 | -t https://staging.example.com \ |
low line 136
External URL reference
SourceSKILL.md
| 136 | nuclei -u https://staging.example.com -t exposed-debug-endpoints.yaml -t cves/ -severity high,critical -json -o nuclei-results.json |
low line 142
External URL reference
SourceSKILL.md
| 142 | [exposed-debug-endpoints] [http] [high] https://staging.example.com/actuator/env |
low line 143
External URL reference
SourceSKILL.md
| 143 | [exposed-debug-endpoints] [http] [high] https://staging.example.com/graphql/playground |
low line 144
External URL reference
SourceSKILL.md
| 144 | [CVE-2021-44228] [http] [critical] https://staging.example.com/api/v2/log |
Scanned on Feb 27, 2026
View Security Dashboard